Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/6be999b5-fb83-3e3f-a429-51952be4a0d4.roa
File:                     6be999b5-fb83-3e3f-a429-51952be4a0d4.roa (raw, json)
Hash identifier:          Gkf3eBZl8thmXjR5rD98DpKvNS5GZUAjTHkJVFpbtJw=
Subject key identifier:   8A:42:BA:A9:D9:86:E2:BF:C5:DB:17:C5:B7:D0:A7:04:C1:8E:AF:23
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584D59EA72575220CD5ACBD29B80
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/6be999b5-fb83-3e3f-a429-51952be4a0d4.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     14773
IP address blocks:        2620:1d5:ff1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:72:57:52:20:cd:5a:cb:d2:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=5f9135bd-fdec-46a0-b5b3-1556403e7610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:5c:f8:ef:48:69:2c:b3:2c:92:f2:83:01:
                    fd:14:0e:5b:d4:c7:aa:f4:94:91:de:08:b7:ef:68:
                    8d:3b:47:d3:2e:89:09:da:86:10:99:23:0d:87:e4:
                    68:53:32:63:e6:63:09:40:77:0b:9b:55:76:d9:10:
                    88:6d:23:76:6f:e4:55:8b:22:75:97:d1:0e:9a:15:
                    e3:dc:89:7f:65:78:ea:23:8c:ef:5d:cf:32:52:5e:
                    7e:58:81:ce:1d:51:fe:13:c6:93:ee:a8:79:7c:05:
                    55:df:58:2a:8e:a2:42:5a:82:b3:70:a1:3a:db:f6:
                    90:9e:fa:6b:80:ad:66:7d:4a:36:d0:d3:c8:85:10:
                    e2:0c:ed:53:67:75:fb:df:36:95:fc:2a:db:c4:12:
                    61:5e:63:b9:b1:87:55:7d:27:67:ef:96:1d:3c:d7:
                    22:a9:aa:43:d9:4c:a2:fe:79:17:25:08:3d:84:c9:
                    93:24:8e:c6:17:67:09:36:94:e8:8d:c0:ef:4d:b4:
                    56:b7:39:ba:26:67:43:f0:7e:f6:fa:65:e6:2c:8f:
                    68:39:49:13:fe:ba:01:45:92:5b:b9:90:88:cd:77:
                    8d:1e:b6:2a:0b:74:fc:5a:82:b2:20:69:d3:60:e8:
                    06:3b:ee:b4:6c:98:b0:78:ee:5f:3e:1a:89:7b:e7:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:42:BA:A9:D9:86:E2:BF:C5:DB:17:C5:B7:D0:A7:04:C1:8E:AF:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/6be999b5-fb83-3e3f-a429-51952be4a0d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:ff1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:f2:5f:d7:76:98:c2:51:b1:b7:9e:c7:63:bc:cb:24:24:84:
         ab:59:a2:99:01:bd:80:eb:97:ac:39:03:1f:d3:dc:a2:23:64:
         ed:a8:9a:cb:e7:74:73:da:20:31:03:f5:c0:14:6a:0a:fc:5b:
         bc:84:ee:75:97:33:d4:e9:6f:ed:88:ed:e0:18:32:0a:ed:71:
         fe:7e:2f:b4:4e:58:8c:10:cb:9d:e3:61:50:3f:b2:78:3e:77:
         fd:d7:ac:22:2d:22:6b:60:1b:d8:9a:57:23:e3:aa:57:7b:90:
         b6:ef:75:59:dc:72:88:60:d6:5f:fa:71:77:2a:a4:26:b7:36:
         33:1a:15:98:cb:69:6f:ca:2d:cf:13:23:90:40:b0:99:6f:07:
         bc:3f:94:55:f3:f3:46:2f:6a:c0:d1:c4:b7:89:d0:4e:bd:81:
         a3:12:7d:26:aa:71:49:6c:41:f6:1a:37:f4:21:dd:e6:49:d1:
         c7:23:b8:9f:0f:67:69:c4:df:d3:a0:2a:2e:2e:1b:3b:26:4b:
         c5:65:6d:ef:ba:5a:c8:91:2e:cc:21:89:c6:56:37:ca:44:61:
         26:8a:94:d8:f8:cf:e2:37:10:70:07:e1:22:51:4b:10:90:7b:
         d5:1b:cd:96:47:d0:b1:25:e2:fa:93:b2:9b:61:e1:2e:d0:bb:
         79:4e:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:38 2026 by rpki-client